2026-07-19_608d6659ad8fdcfbb174ea194d724ca9_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-19_608d6659ad8fdcfbb174ea194d724ca9_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos
Size 6.2MB
Sample260720-btyyesdz5v
SHA256 a0b740b65de8a2e94900872c80fead781f8f98ca85d21778deded61f3056f0d1
MD5 608d6659ad8fdcfbb174ea194d724ca9
SHA1 a15c4a951a3633a47915ec86aa9988c04348a138
SHA512 781b0fc8585601c56e980499cf2a4b3665ae9bd2e8849c64bb74ce70ef7fb566a295bac9ba8590f041592724b59f993549279959243d083b1f5c0ecde7a5b9d3
SSDEEP 98304:/IpTrWDjFDQUAY17mTAAbN7IIWeUEY8n+2wNZUuvPv1vgz:wdZwNiA8a1Etn6pXdYz
TLSH
T18B668D22F1718073D61205765925772E88AB5EA10729D5CBB3EC3C6A0F74BD226F33B6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-07-19_608d6659ad8fdcfbb174ea194d724ca9_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos

.exe 6.2MB

2026-07-19_608d6659ad8fdcfbb174ea194d724ca9_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos

IMPHASH f188e5fcddd4b0b20cfb6514d526ebf9
SHA256 a0b740b65de8a2e94900872c80fead781f8f98ca85d21778deded61f3056f0d1
MD5 608d6659ad8fdcfbb174ea194d724ca9
SHA1 a15c4a951a3633a47915ec86aa9988c04348a138
SHA512 781b0fc8585601c56e980499cf2a4b3665ae9bd2e8849c64bb74ce70ef7fb566a295bac9ba8590f041592724b59f993549279959243d083b1f5c0ecde7a5b9d3
SSDEEP 98304:/IpTrWDjFDQUAY17mTAAbN7IIWeUEY8n+2wNZUuvPv1vgz:wdZwNiA8a1Etn6pXdYz
TLSH
T18B668D22F1718073D61205765925772E88AB5EA10729D5CBB3EC3C6A0F74BD226F33B6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

f0:8e:be:6c:52:f0:d5:23:79:23:eb:b6:bc:fa:60:3b:02:68:34:9f:72:e6:59:31:43:e7:bd:4d:89:6e:c3:c4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91410100MACYAHQR7J,CN=郑州市千象网络技术有限公司,O=郑州市千象网络技术有限公司,L=郑州,ST=河南,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13095a68656e677a686f75,1.3.6.1.4.1.311.60.2.1.2=#130548656e616e,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 6, 2026

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

Serial Number

02:ac:e4:a3:1f:26:8d:80:65:36:01:90

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 24, 2025 - Nov 24, 2028

Subject

CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 9, 2020 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

1389819

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\fhsource\qxzip_newicon\product\win32\dbginfo\qzipgui.pdb

kernel32

LoadLibraryA FlushConsoleInputBuffer GlobalMemoryStatus QueryPerformanceCounter GetStdHandle GetFileType GetVersion GetModuleHandleA FileTimeToLocalFileTime FindVolumeClose FindNextVolumeA FindFirstVolumeA GetVolumeInformationA lstrcmpW GetLogicalDrives GetCommandLineW FindCloseChangeNotification FindNextChangeNotification FindFirstChangeNotificationW CreateFileMappingW UnmapViewOfFile MapViewOfFile GetFileInformationByHandle MulDiv lstrlenW GetLocalTime GetVolumeInformationW GetDiskFreeSpaceExW GetDriveTypeW GetLogicalDriveStringsW GlobalSize GetFileAttributesExW CreateSemaphoreA WaitForSingleObjectEx TerminateProcess GetCurrentProcessId GetCurrentDirectoryW CompareStringW GetWindowsDirectoryW GetPrivateProfileStringW WriteConsoleW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage OutputDebugStringA SetStdHandle ReadConsoleW GetConsoleCP GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale SystemTimeToTzSpecificLocalTime GetACP SetConsoleMode ReadConsoleInputA GetConsoleMode SetConsoleCtrlHandler ExitProcess GetModuleHandleExW ExitThread RtlUnwind UnregisterWaitEx QueryDepthSList InterlockedFlushSList VirtualProtect LoadLibraryExW FreeLibraryAndExitThread GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetThreadPriority SetThreadPriority SwitchToThread SignalObjectAndWait CreateTimerQueue CreateWaitableTimerA GetLogicalProcessorInformation ResumeThread SetWaitableTimer OpenMutexW CreateMutexW GetCurrentThreadId GlobalFree FreeResource InterlockedExchange CopyFileW CreateEventA WaitForMultipleObjectsEx ReleaseSemaphore CreateProcessW GetTempPathW lstrcmpiW OpenProcess OutputDebugStringW SetFilePointerEx GetFileSizeEx FileTimeToSystemTime SystemTimeToFileTime GetSystemTime SetLastError GetCurrentProcess GlobalUnlock GlobalLock GlobalAlloc InterlockedCompareExchange Sleep ResetEvent TerminateThread CreateThread InterlockedDecrement InterlockedIncrement GetPrivateProfileIntW CreateEventW WaitForMultipleObjects WaitForSingleObject SetEvent LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetExitCodeThread SetEndOfFile GetTickCount DeleteCriticalSection InitializeCriticalSectionAndSpinCount RaiseException DecodePointer GetVersionExW GetSystemDirectoryW GetModuleHandleW WideCharToMultiByte FindNextFileW FindFirstFileW DeleteFileW GetFileAttributesW RemoveDirectoryW CreateDirectoryW GetModuleFileNameW FindClose CreateFileW CloseHandle SetFilePointer FlushFileBuffers ReadFile WriteFile GetFileSize LocalFree LocalAlloc MultiByteToWideChar FindResourceExW FindResourceW LoadLibraryW SizeofResource LoadResource GetLastError GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetProcAddress FreeLibrary OpenEventA VerifyVersionInfoA GetSystemDirectoryA VerSetConditionMask PeekNamedPipe SleepEx FormatMessageA ExpandEnvironmentStringsA GetVersionExA HeapCreate GetFullPathNameW LoadLibraryExA VirtualFree VirtualAlloc FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList GetStartupInfoW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter InitializeSListHead GetCPInfo GetLocaleInfoW LCMapStringW GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc GetCurrentThread DuplicateHandle IsProcessorFeaturePresent TryEnterCriticalSection QueryPerformanceFrequency EncodePointer GetStringTypeW FindFirstFileExW LockResource

user32

GetForegroundWindow SetForegroundWindow GetDC ReleaseDC InvalidateRect GetClientRect GetWindowRect MapVirtualKeyA SetMenuContextHelpId GetMenuItemInfoW SetMenuInfo GetMenuInfo TrackPopupMenu AppendMenuW GetMenuItemCount DestroyMenu CreatePopupMenu IsMenu SystemParametersInfoA CharNextW GetSysColor EnableMenuItem MsgWaitForMultipleObjects GetKeyState GetClassNameW SetCaretPos HideCaret GetCaretBlinkTime CreateCaret SetActiveWindow UpdateWindow GetCapture SetLayeredWindowAttributes AnimateWindow TrackMouseEvent CreateIconFromResource DestroyCursor GetIconInfo MapWindowPoints CopyRect InflateRect OffsetRect GetDesktopWindow FindWindowW GetWindowThreadProcessId GetWindow LoadBitmapW LoadCursorW LoadImageW SystemParametersInfoW MonitorFromRect SetCapture GetMessageW TranslateMessage DispatchMessageW PeekMessageW PostThreadMessageW IsWindowEnabled EnableWindow GetActiveWindow SetWindowPos IsChild UpdateLayeredWindow IsWindowVisible MoveWindow IsIconic GetDlgItem GetNextDlgTabItem GetDlgCtrlID SetFocus GetFocus ReleaseCapture DrawTextW BeginPaint EndPaint SetWindowRgn SetCursor GetCursorPos ClientToScreen ScreenToClient SetRect SetRectEmpty ShowWindow DestroyWindow IsWindow CreateWindowExW GetClassInfoExW RegisterClassExW DefWindowProcW AttachThreadInput PostMessageW PrivateExtractIconsW RegisterWindowMessageW CharLowerBuffW wsprintfW FindWindowExW GetParent SetWindowLongW GetWindowLongW RegisterClipboardFormatW GetClipboardData CloseClipboard OpenClipboard EndDialog CallWindowProcW SendMessageW KillTimer SetTimer UnregisterClassW SetWindowTextW MessageBoxA GetProcessWindowStation GetUserObjectInformationW PostQuitMessage IsZoomed EnumDisplayDevicesW EnumDisplaySettingsW UnionRect GetSystemMetrics BringWindowToTop GetMonitorInfoW MonitorFromWindow IsDialogMessageW DrawIconEx DestroyIcon LoadIconW PtInRect EqualRect IsRectEmpty IntersectRect

gdi32

OffsetRgn LineTo GetViewportOrgEx GetTextExtentPoint32W GetTextColor SetBkMode GetClipRgn CreateRoundRectRgn CreateRectRgnIndirect CombineRgn ExtTextOutW GetObjectW CreateDIBSection SetTextColor SetStretchBltMode StretchBlt SetBkColor SelectObject SelectClipRgn SaveDC RestoreDC Rectangle GetStretchBltMode GetStockObject RectInRegion DeleteObject DeleteDC CreateRectRgn CreatePen CreateFontIndirectW CreateCompatibleDC CreateCompatibleBitmap CreateBitmap BitBlt GetCurrentObject ExtCreateRegion GetRegionData IntersectClipRect SetGraphicsMode EnumFontsW CreateSolidBrush MoveToEx TextOutW SetViewportOrgEx RoundRect GetDeviceCaps ExtSelectClipRgn EnumFontFamiliesExW GetCharABCWidthsW GetFontData GetGlyphOutlineW GetOutlineTextMetricsW GetFontUnicodeRanges GetGlyphIndicesW GetTextExtentPointI AddFontMemResourceEx RemoveFontMemResourceEx SetTextAlign GetTextMetricsW SetWorldTransform GetTextFaceW GdiFlush

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

GetSidSubAuthority RegisterEventSourceA ReportEventA DeregisterEventSource QueryServiceStatus OpenServiceW OpenSCManagerW CloseServiceHandle SetNamedSecurityInfoW GetNamedSecurityInfoW GetUserNameW LookupPrivilegeValueW LookupAccountNameW GetAce AddAce GetAclInformation InitializeAcl CopySid GetLengthSid GetSidSubAuthorityCount CryptAcquireContextA GetSidIdentifierAuthority InitializeSid GetSidLengthRequired IsValidSid AdjustTokenPrivileges OpenProcessToken RegQueryInfoKeyW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegSetValueExW RegOpenKeyW RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey CryptEncrypt CryptImportKey CryptDestroyKey CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext

shell32

ord18 ord680 ShellExecuteW DragFinish SHGetFileInfoW SHChangeNotify ord716 DragAcceptFiles ord727 SHFileOperationW SHGetSpecialFolderPathW SHCreateDirectoryExW CommandLineToArgvW DragQueryFileW ShellExecuteExW SHCreateItemFromIDList SHCreateShellItemArrayFromIDLists SHGetMalloc ord155 ord190 SHGetPathFromIDListW SHOpenFolderAndSelectItems SHGetSpecialFolderLocation SHBrowseForFolderW SHGetDesktopFolder SHBindToParent SHBindToObject

ole32

CreateBindCtx CLSIDFromProgID CLSIDFromString OleSetClipboard ReleaseStgMedium OleIsCurrentClipboard OleFlushClipboard DoDragDrop CoTaskMemAlloc CoTaskMemFree CreateStreamOnHGlobal OleUninitialize OleInitialize CoCreateGuid StringFromGUID2 OleLockRunning CoCreateInstance CoUninitialize OleGetClipboard CoInitialize

oleaut32

VariantCopy VariantClear SysAllocStringLen SysAllocString SysFreeString VariantInit

shlwapi

PathFindFileNameW PathRemoveBackslashW PathRemoveExtensionW StrStrW PathGetDriveNumberW StrToIntExW StrToIntW PathFindExtensionW PathFileExistsW PathAppendW PathRemoveFileSpecW PathAddBackslashW StrToIntA

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipTranslateWorldTransform GdipResetWorldTransform GdipSetTextRenderingHint GdipSetPixelOffsetMode GdipSetSmoothingMode GdipSetCompositingQuality GdipSetPenDashStyle GdipSetPenMode GdipSetPenEndCap GdipSetPenStartCap GdipDeletePen GdipCreatePen1 GdipCreateLineBrushFromRectWithAngleI GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush GdipAddPathPieI GdipAddPathRectangleI GdipAddPathArcI GdipAddPathStringI GdipAddPathRectangle GdipClosePathFigure GdipCreatePath GdipPrivateAddFontFile GdipGetFontCollectionFamilyList GdipScaleWorldTransform GdipDeletePrivateFontCollection GdipNewPrivateFontCollection GdipCloneFontFamily GdipDrawImagePointsRectI GdipDrawImageRectRectI GdipDrawImageRectRect GdipDrawImageRectI GdipGraphicsClear GdipGetImageHeight GdipFree GdipGetImagePixelFormat GdipImageRotateFlip GdipCreateBitmapFromStream GdipSaveImageToFile GdipImageGetFrameCount GdipImageSelectActiveFrame GdipGetPropertyItemSize GdipGetPropertyItem GdipCreateBitmapFromFile GdipCreateBitmapFromFileICM GdipBitmapLockBits GdipBitmapUnlockBits GdipGetImageEncodersSize GdipGetImageEncoders GdipImageGetFrameDimensionsCount GdipImageGetFrameDimensionsList GdipRotateWorldTransform GdipDrawLine GdipDrawLinesI GdipDrawRectangleI GdipDrawPath GdipFillRectangle GdipFillRectangleI GdipFillPath GdipDrawImageI GdipSetClipPath GdipSetClipHrgn GdipCreateFontFromLogfontW GdipCreateFont GdipDeleteFont GdipGetFamily GdipGetFontSize GdipDrawString GdipMeasureString GdipCreateStringFormat GdipDeleteStringFormat GdipSetStringFormatFlags GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipSetStringFormatTrimming GdipSetImageAttributesWrapMode GdipAddPathEllipseI GdipResetClip GdipReleaseDC GdipGetFontCollectionFamilyCount GdipDrawLineI GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdipLoadImageFromFile GdipLoadImageFromStream GdiplusShutdown GdiplusStartup GdipAlloc GdipDeleteFontFamily GdipDeletePath GdipSetInterpolationMode GdipDeleteGraphics GdipCreateFromHDC GdipSetImageAttributesColorMatrix GdipDisposeImageAttributes GdipCreateImageAttributes GdipCloneBitmapArea GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromScan0 GdipCreateBitmapFromStreamICM

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

mpr

WNetOpenEnumW WNetEnumResourceW WNetCloseEnum

imm32

ImmReleaseContext ImmGetContext ImmAssociateContext

ws2_32

htons WSACleanup gethostname ioctlsocket sendto recvfrom listen accept freeaddrinfo getaddrinfo WSAIoctl socket setsockopt ntohs WSAStartup getsockopt getsockname getpeername connect closesocket bind send recv WSASetLastError select __WSAFDIsSet WSAGetLastError

wldap32

ord35 ord33 ord32 ord27 ord26 ord79 ord41 ord50 ord60 ord211 ord46 ord143 ord30 ord200 ord22 ord301

usp10

ScriptItemize ScriptFreeCache ScriptShape

Name

.text

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

835KB

Virtual Size

835KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

87KB

Virtual Size

193KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

198KB

Virtual Size

198KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=36, id=241, version=40116,

count=207, id=243, version=40116,

count=41, id=242, version=40116,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=3, id=261, version=23013,

count=8, id=199, version=41118,

count=26, id=259, version=24123,

count=129, id=261, version=24123,

count=40, id=260, version=24123,

count=12, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=41, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=735, id=1, productName=Unmarked objects,

count=14, productName=Unmarked objects (old),

count=317, id=109, productName=VS2005 build 50727, version=50727,

count=91, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=569, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=2, id=151,

count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,